CVE-2025-25197 - XSS attack in elemental "Content blocks in use" report

More info at https://www.silverstripe.org/download/security-releases/cve-2025-25197...

financia-business-school.com Cross Site Scripting vulnerability OBB-4042996

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

financieel-management.nl Cross Site Scripting vulnerability OBB-4042995

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Moodle 4.2.x < 4.2.4 Multiple Vulnerabilities

According to its self-reported version, the Moodle install hosted on the remote host is prior to 3.9.25 / 3.11.x prior to 3.11.18 / 4.0.x prior to 4.0.12 / 4.1.x prior to 4.1.7 / 4.2.x prior to 4.2.4. It is, therefore, affected by multiple vulnerabilities: - XSS risk when manually running a task ...

Moodle 4.2.x < 4.2.4 Multiple Cross-Site Scripting

According to its self-reported version, the Moodle install hosted on the remote host is 4.2.x prior to 4.2.4 or 4.3.x prior to 4.3.1. It is, therefore, affected by multiple cross-site scripting: - Reflected XSS risk on ad-hoc tasks page - Reflected XSS risk in grader report search - Stored XSS in...

Moodle 4.0.x < 4.0.7 Multiple Vulnerabilities

According to its self-reported version, the Moodle install hosted on the remote host is prior to 3.9.20, 3.11.x prior to 3.11.13, 4.0.x prior to 4.0.7 or 4.1.x prior to 4.1.2. It is, therefore, affected by multiple vulnerabilities. - The course participation report required additional checks to...

Moodle 4.1.x < 4.1.2 Multiple Vulnerabilities

According to its self-reported version, the Moodle install hosted on the remote host is prior to 3.9.20, 3.11.x prior to 3.11.13, 4.0.x prior to 4.0.7 or 4.1.x prior to 4.1.2. It is, therefore, affected by multiple vulnerabilities. - The course participation report required additional checks to...

Moodle 3.11.x < 3.11.13 Multiple Vulnerabilities

According to its self-reported version, the Moodle install hosted on the remote host is prior to 3.9.20, 3.11.x prior to 3.11.13, 4.0.x prior to 4.0.7 or 4.1.x prior to 4.1.2. It is, therefore, affected by multiple vulnerabilities. - The course participation report required additional checks to...

The Riskiest Connected Devices of 2025

Since 2020, Forescout Research - Vedere Labs has been monitoring the riskiest devices in organizational networks, leveraging data sourced directly from the devices themselves. This marks their fifth report in six years...

Moodle 4.3.x < 4.3.8 Multiple Vulnerabilities

According to its self-reported version, the Moodle install hosted on the remote host is 4.1.x prior to 4.1.14, 4.2.x prior to 4.2.11, 4.3.x prior to 4.3.8, or 4.4.x prior to 4.4.4. It is, therefore, affected by multiple vulnerabilities. - An IDOR when fetching report schedules. - Some users can...

PT-2025-27727

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the dm blk report zones function. The issue arises when dm get live table returns NULL, and dm put live table is not...

Moodle 4.2.x < 4.2.11 Multiple Vulnerabilities

According to its self-reported version, the Moodle install hosted on the remote host is 4.1.x prior to 4.1.14, 4.2.x prior to 4.2.11, 4.3.x prior to 4.3.8, or 4.4.x prior to 4.4.4. It is, therefore, affected by multiple vulnerabilities. - An IDOR when fetching report schedules. - Some users can...

brooklane.org Cross Site Scripting vulnerability OBB-4042980

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-30651

creationtimestamp| type| source ---|---|--- 2025-04-09 20:22:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114309865308254607 2025-04-09 20:48:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11165 2025-04-09 23:28:13+00:00| seen| https://t.me/cvedetector/22596 2025-04-09...

CVE-2025-21591

creationtimestamp| type| source ---|---|--- 2025-04-09 19:59:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114309777091248159 2025-04-28 17:10:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13712...

CVE-2025-2629

creationtimestamp| type| source ---|---|--- 2025-04-09 19:14:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114309599245458822...

cremas-para-la-piel.es Cross Site Scripting vulnerability OBB-4042974

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-3474

creationtimestamp| type| source ---|---|--- 2025-04-09 18:00:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114309307406934504 2025-04-09 18:48:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11137 2025-04-09 20:57:09+00:00| seen| https://t.me/cvedetector/22567...

zdravenportal.eu Open Redirect vulnerability OBB-4042967

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-31036

creationtimestamp| type| source ---|---|--- 2025-04-09 16:48:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11124 2025-04-09 19:48:53+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114309734861586827...